• Title/Summary/Keyword: Security control system

Search Result 1,742, Processing Time 0.033 seconds

A Countermeasure against a Whitelist-based Access Control Bypass Attack Using Dynamic DLL Injection Scheme (동적 DLL 삽입 기술을 이용한 화이트리스트 기반 접근통제 우회공격 대응 방안 연구)

  • Kim, Dae-Youb
    • Journal of IKEEE
    • /
    • v.26 no.3
    • /
    • pp.380-388
    • /
    • 2022
  • The traditional malware detection technologies collect known malicious programs and analyze their characteristics. Then such a detection technology makes a blacklist based on the analyzed malicious characteristics and checks programs in the user's system based on the blacklist to determine whether each program is malware. However, such an approach can detect known malicious programs, but responding to unknown or variant malware is challenging. In addition, since such detection technologies generally monitor all programs in the system in real-time, there is a disadvantage that they can degrade the system performance. In order to solve such problems, various methods have been proposed to analyze major behaviors of malicious programs and to respond to them. The main characteristic of ransomware is to access and encrypt the user's file. So, a new approach is to produce the whitelist of programs installed in the user's system and allow the only programs listed on the whitelist to access the user's files. However, although it applies such an approach, attackers can still perform malicious behavior by performing a DLL(Dynamic-Link Library) injection attack on a regular program registered on the whitelist. This paper proposes a method to respond effectively to attacks using DLL injection.

A Study on the Unmanned convenience Store Operation System from the Viewpoint of Visual Merchandising (비주얼 머천다이징 관점에서의 무인 편의점 운영시스템에 관한 연구)

  • Seo, Jung-Hwa;Yang, Hoe-Chang;Park, Chul-Ju;Youn, Myoung-Kil
    • The Journal of Industrial Distribution & Business
    • /
    • v.9 no.12
    • /
    • pp.45-53
    • /
    • 2018
  • Purpose - The purpose of the study was to investigate operation system of current convenience store and competing retail store and to find out development of unattended convenience store. Operators can save labor cost and solve labor seeking when opening shop under suitable environment and commerce area, and assure of employee's safety. Customers are allowed to select commodity comfortably without disclosure of face and to shorten standby time at simple store opening, buying and paying and to produce convenient living environment by financing, delivery and goods control. This study examined effect and problems of operation of existing and unattended convenience store from point of view of visual merchandising to find out model of unattended convenience store and to strengthen competitiveness of convenience store business. Research design, data, and methodology - Research procedure of accomplishment of goal of the study was: The study investigated state of distribution business, and role and definition of VMD. First, VMD played an important role of promotion and competitiveness of unattended convenience stores. Second, the author investigated research and cases of unattended convenience stores 14 months, that is to say, from August 15, 2017 to October 15, 2018. Third, the author investigated on-the-spot three of common convenience stores, three of unattended convenience stores and three of retailers one month, that is to say, June 1, 2018 to July 1, 2018. The subject was convenience stores and retailers selling similar type of products at Seoul and metropolitan area. Results - Layout, selling place, brand identity, goods assortment, authentication system, product information cognition and control, buying and payment system, security system, salesmen, promotion and other services should be improved from point of view of merchandising. Structure, furniture, lighting, voice, façade, VP, PP, IP and POP should be developed. Conclusions - Unattended convenience stores saved operating cost and lessened labor and gave visitors convenience and comfortable shopping and made use of resources effectively. Further studies with quantitative analysis shall find out strategic conditions for promotion of unattended convenience stores.

Proposal for Research Model of High-Function Patrol Robot using Integrated Sensor System (통합 센서 시스템을 이용한 고기능 순찰 로봇의 연구모델 제안)

  • Byeong-Cheon Yoo;Seung-Jung Shin
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.24 no.3
    • /
    • pp.77-85
    • /
    • 2024
  • In this dissertation, a we designed and implemented a patrol robot that integrates a thermal imaging camera, speed dome camera, PTZ camera, radar, lidar sensor, and smartphone. This robot has the ability to monitor and respond efficiently even in complex environments, and is especially designed to demonstrate high performance even at night or in low visibility conditions. An orbital movement system was selected for the robot's mobility, and a smartphone-based control system was developed for real-time data processing and decision-making. The combination of various sensors allows the robot to comprehensively perceive the environment and quickly detect hazards. Thermal imaging cameras are used for night surveillance, speed domes and PTZ cameras are used for wide-area monitoring, and radar and LIDAR are used for obstacle detection and avoidance. The smartphone-based control system provides a user-friendly interface. The proposed robot system can be used in various fields such as security, surveillance, and disaster response. Future research should include improving the robot's autonomous patrol algorithm, developing a multi-robot collaboration system, and long-term testing in a real environment. This study is expected to contribute to the development of the field of intelligent surveillance robots.

A Study on Utilization Effect and Implementation Model of Directory Service Based Information Resource Management System (디렉터리 서비스 기반 정보자원 관리시스템의 활용 효과 및 구축 모델에 대한 연구)

  • Lee, Sung-Jun;Kim, Hyuk;Lee, Kwang Soo;Kim, Minsoo
    • Journal of Information Technology and Architecture
    • /
    • v.11 no.4
    • /
    • pp.427-439
    • /
    • 2014
  • Introduction of new information systems due to continuous progress of ICT has made the enterprise IT environment into a mixed pot of various IT resources. Rapidly changing business situation has emphasized the integration of organizational IT resources as one of key competitive advantages. Those distributed IT resources are now demanding to solve the problems not only on their own effective management but also on security and control issues against unauthorized infiltration and information leakages. Under the situation that the number of IT resources is constantly increasing, it is needed to study a management model and its implementation that integrally solves above all problems. In this paper, it is revealed that a directory service can be used to integrally manage distributed IT resources and a directory service based system model for distributed IT resource management is suggested. By implementing an HR solution over active directory service, it is demonstrated that our integrated management model for distributed resources is applicable to real business cases. It is expected that for small and medium sized enterprises with limited IT investments, directory service based IT resource management system can be a cost-effective solution for increasing security threats and lack of governance.

The Proposition of Domestic Sprinklers Installation Standard and the Fire Services Act (국내 스프링클러 설치기준과 소방관련 법에 관한 고찰)

  • Kim, Yong-Moon;Lee, Young-Jai
    • Journal of Korean Society of Disaster and Security
    • /
    • v.7 no.2
    • /
    • pp.17-24
    • /
    • 2014
  • Recently, many accidents occur frequently because sprinklers aren't installed or don't work right when there are outbreak of fire in houses and aggregate buildings. Therefore, they can result in damage for humans and loss of property. Sprinklers are the most appropriate which can extinguish buildings' fire in the initial stages. Through lack of legal system, in domestic cases, sprinklers cannot operate their inherent performance. Domestic standard simply classifies installation objects according to types of business and forms of buildings, also divides into uses and floors of buildings. Especially it only regulates that sprinklers must be installed every floors in particular fire buildings that have more than eleven floors. While it doesn't need to install sprinklers below ten floors, so we are threatened the safety. In this study, we derived causes and implications by analyzing concepts of sprinklers facilities, installation standards in domestic and foreign legal system, and recent cases that expanded damages in fire accidents because of weak point of installation and control standards. In domestic cases, as a result, government has to provide an institutional strategy and law that regulate duty to install sprinklers to all aggregate buildings regardless of floors in terms of new buildings. Also, if someone who has existing buildings wanted to install them, government would guarantee subsidy to encourage installation. In addition, government supervises fire-fighting activities when there are fire by compensating standards about regular inspection by a qualified technician, operation and maintenance of sprinklers as well as reinforcement of administrative criteria.

A Study on the Police Station for Adoption of Local Police System (지역경찰관서 설치에 관한 연구)

  • Park, Chan-Hyeok;Jung, Eui-Rom
    • The Journal of the Korea Contents Association
    • /
    • v.18 no.8
    • /
    • pp.536-543
    • /
    • 2018
  • In 2003, the local police system was adopted, and the personnel and installation of local police agencies were subsequently changed. According to the "Police Law", local police station shall be established under the control of chief of police department, and the criteria for the installation of local police stations were to take into consideration of population, administrative districts, area, geographical characteristics, traffic and other conditions. The chief of local police has the authority to install district police station according to the "National Police Agency and its Organization". However, it is hard to say they were applied. Futhermore, it is inappropriate to apply the laws and regulations equally across the nation. Also, it has been criticized for its difficulties of patrolling, the weakened relationship with local residents, and poor quality of security services in rural areas. Therefore, this study suggests that the criteria for the installation of the police station should be made through a comprehensive analysis of the characteristics of the areas and security needs.

A Study on the Disaster Prevention Technology of the Switchboard with Upper and Lower Bending Type Seismic Pads (상하굴절형 내진패드를 설치한 수배전반 방재기술에 관한 연구)

  • Lee, Taeshik;Seok, Gumcheul;Lee, Jaewon;Kim, Taejin;Kim, Jaekwon;Cho, Woncheol
    • Journal of Korean Society of Disaster and Security
    • /
    • v.10 no.1
    • /
    • pp.85-90
    • /
    • 2017
  • The purpose of this study is to investigate the effect of vertical and horizontal refraction on the lower part of the power supply and control system of various facilities and machinery that use electricity, so that the power distribution system, which is an important electric facility installed in buildings and public facilities, Type earthquake resistant pads to protect the substructure and prevent short-circuiting on the upper part of the system. The GR-63-CORE (Scale 8.3 class) It is earthquake disaster prevention and disaster prevention technology that satisfies seismic performance. As a research result, it is possible to protect the electricity and communication infrastructure, which can contribute to shortening the time for recovering the electric facilities to the normal state in case of an earthquake, and preventing the fire caused by the destruction of the electricity supply facility in case of an earthquake. As a result, it is possible to minimize the spread of fire that occurs when a large-scale earthquake occurs and to minimize the damage of people and damage to property, and it can contribute to the securing of electric infrastructure that enables citizens to quickly recover to daily life even after suffering a major earthquake. In addition, the technology can be applied to ensure the seismic resistance of the equipment in the communication and computer room, and it can be applied to various fields where the facility function can be stopped due to the shaking of the earthquake base.

IAM Architecture and Access Token Transmission Protocol in Inter-Cloud Environment (Inter-Cloud 환경에서의 IAM 구조 및 액세스 토큰 전송 프로토콜)

  • Kim, Jinouk;Park, Jungsoo;Yoon, Kwonjin;Jung, Souhwan
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.26 no.3
    • /
    • pp.573-586
    • /
    • 2016
  • With the adoption of cloud computing, the number of companies that take advantage of cloud computing has increased. Additionally, various of existing service providers have moved their service onto the cloud and provided user with various cloud-based service. The management of user authentication and authorization in cloud-based service technology has become an important issue. This paper introduce a new technique for providing authentication and authorization with other inter-cloud IAM (Identity and Access Management). It is an essential and easy method for data sharing and communication between other cloud users. The proposed system uses the credentials of a user that has already joined an organization who would like to use other cloud services. When users of a cloud provider try to obtain access to the data of another cloud provider, part of credentials from IAM server will be forwarded to the cloud provider. Before the transaction, Access Agreement must be set for granting access to the resource of other Organization. a user can access the resource of other organization based on the control access configuration of the system. Using the above method, we could provide an effective and secure authentication system on the cloud.

Assessment of Perspective Development of Transport and Logistics Systems at Macro and Micro Level under the Conditions of Industry 4.0 Integration

  • Maiboroda, Olha;Bezuhla, Liudmyla S.;Gukaliuk, Andrii F.;Shymanska, Viktoriia;Momont, Tetiana;Ilchenko, Tetiana V.
    • International Journal of Computer Science & Network Security
    • /
    • v.21 no.3
    • /
    • pp.235-244
    • /
    • 2021
  • The change of the development of transport and logistics systems occurs with the active change of technology and the advent of the era of Industry 4.0. It requires modernization of approaches to the development of transport and logistics systems at the macro and micro levels. The present study aims to identify perspective directions of development and evolution, find out the existing obstacles in the integration of technological solutions of transport and logistics systems at the macro and micro levels. This study is based on a quantitative and qualitative methodology for assessing the level of integration of technologies into transport and logistics systems to study the prospects for their development at the micro level. Macroeconomic indicators of transport and logistics in the context of different regions of the world were used to quantify the development prospects. For a qualitative assessment of the development of the transport and logistics system, the case study method was used. The object of the study was selected logistics company Sensco Logistics Inc., Austin TX. At the macro level, countries with more innovative logistics sectors have stronger mechanisms for coordinating private sector activities. Simplification of administrative procedures of control and regulation by the public sector in order to facilitate trade between countries is a promising direction for the development of transport and logistics systems. Such reforms are more effective in developing a "rigid" transport infrastructure. The integration of Industry 4.0 technology solutions into the international logistics sector is defined by political and legal barriers, especially in developing countries. In low-income countries, hard and soft infrastructure reforms are hindering the development of logistics companies that provide transport services. This determines the national level of development of transport and logistics systems, and in general the global level of development of transport and logistics. In developed countries, the legal barriers to the development of new technological logistics are environmental requirements for the integration of technologies into the transport system. These trends are slowing down the development of International Logistics, which, compared to other industries, is slower to integrate Industry 4.0 technologies. This study combines macroeconomic factors that determine the prospects for the development of transport and logistics systems at the micro level.

Comparative study on the role of the public sector in the health care system -Comparison of the United States and Korea in social risk situations- (의료보장 체계에서의 공공 부분의 역할 비교연구 -사회적 위험 상황 속의 미국과 한국의 비교-)

  • Kim Jong Hwi;Hyun-Seung Park
    • Industry Promotion Research
    • /
    • v.9 no.2
    • /
    • pp.95-102
    • /
    • 2024
  • This study aims to compare the role of the public sector in the U.S. and Korean medical security systems and study response measures in the social risk situation of the COVID-19 virus. The COVID-19 pandemic was a typical case of a 'disaster' that spread across the world across borders in a short period of time and caused serious social welfare losses by increasing the annual number of deaths by approximately 4% in 2020. Threats to health security, such as changes in social order, unpredictable endings, prolonged control of daily life, and deepening inequality, affected the economy, politics, and environment as a whole, and people had to experience anxiety and confusion due to mental and physical stress. Furthermore, developed countries failed to provide help to low-income countries in the face of global disasters. In this situation, the country's disaster management capacity to minimize harm and secure resilience, especially disaster response capacity in the health and medical field, is inevitably very important. Therefore, this study compares how the health insurance system, which is a system to guarantee citizens' right to life, differs from the United States, a liberal health care country, and raises the need to strengthen the role of the public sector.